Optimal Positioning of Active and Passive Monitoring Devices


 Ginger Lang
 2 years ago
 Views:
Transcription
1 Optimal Positioning of Active and Passive Monitoring Devices Claude Chaudet GET/ENST LTCIUMR 5141 CNRS 46, rue Barrault Paris, France Eric Fleury, Isabelle Guérin Lassous {Eric.Fleury, Isabelle.Guerin INRIA ARES Project Laboratoire CITI INSA de Lyon 21, avenue Jean Capelle Villeurbanne Cedex France Hervé Rivano, MarieEmilie Voge {Herve.Rivano,Marie CNRS/I3S/INRIA Mascotte INRIA Sophia Antipolis 2004 route des lucioles Sophia Antipolis Cedex France ABSTRACT Network measurement is essential for assessing performance issues, identifying and locating problems. Two common strategies are the passive approach that attaches specific devices to links in order to monitor the traffic that passes through the network and the active approach that generates explicit control packets in the network for measurements. One of the key issues in this domain is to minimize the overhead in terms of hardware, software, maintenance cost and additional traffic. In this paper, we study the problem of assigning tap devices for passive monitoring and beacons for active monitoring. Minimizing the number of devices and finding optimal strategic locations is a key issue, mandatory for deploying scalable monitoring platforms. In this article, we present a combinatorial view of the problem from which we derive complexity and approximability results, as well as efficient and versatile Mixed Integer Programming (MIP) formulations. Categories and Subject Descriptors G.1.6 [Optimization]: Constrained optimization General Terms THEORY,PERFORMANCE This work has been partially supported by the European IP ISTFET CRESCCO. Permission to make digital or hard copies of all or part of this work for personal or classroom use is granted without fee provided that copies are not made or distributed for profit or commercial advantage and that copies bear this notice and the full citation on the first page. To copy otherwise, to republish, to post on servers or to redistribute to lists, requires prior specific permission and/or a fee. CoNET 05, October 24 27, 2005, Toulouse, France. Copyright 2005 ACM /05/ $5.00. Keywords Passive Monitoring, Active Monitoring, Optimization 1. INTRODUCTION The number of users of the Internet is growing fast, as well as the amount of traffic conveyed and the complexity of the network topology. Consequently, the Internet backbones are also growing rapidly, taking advantage of every new speed enhancing technology in order to provide the bandwidth required by new applications. An Internet Service Provider (ISP) network is composed of multiple Points Of Presence (POPs), as shown on Figure 1. POPs are sophisticated engineering systems and their expansion yields to complex and irregular topologies. If the growth of the amount of traffic is a key issue in designing POPs architectures, the nature of the traffic is also evolving introducing strong constraints on the network performance. Indeed, enhancing the global network performance is becoming more and more critical since many ebusiness applications rely on the high availability of the network resources. This creates a high level of competition between ISPs, each seeking to accurately measure its POPs performances in order to be able to correctly negotiate service level agreements (SLAs) with customers. A service level agreement can specify several performance parameters. The ISP shall guarantee that all parameters levels are in concordance to the negotiated values and report any deviation from the initial rules. To fulfill this objective, ISPs have to deploy and maintain specific tools and devices to monitor the network. Analyzing network traffic patterns is essential for managing these complex systems and ISPs have to monitor their POPs status and the traffic they convey, for example to perform provisioning. Provisioning usually requires detailed information on the network capacity and traffic patterns and therefore needs detailed analysis of links usage over time. A constant monitoring is also required to enforce and ensure both connectivity and security of the infrastructure. Permanent monitoring is useful for example to detect unusual traffic amount or patterns resulting
2 from unauthorized activities. Denial of service attacks, for instance, can be detected by noticing a sudden and important increase in the number of shortlived flows originated at random IP addresses [13]. In this work, we seek to minimize the infrastructure cost of both passive and active monitoring. For passive monitoring, we study the problem of sampling packets and thus we present efficient way of placing monitor devices and how to control their sampling rates. Sampling is crucial since all monitoring devices are not able to sustain a 100 % sampling rate on high speed links (OC48, OC192 and higher), since the exploitation cost of the monitoring devices may depend on their sampling rate and also because it may not be useful for an ISP to monitor every traffic going through its POP. Indeed, capturing 90 % of the traffic may be enough to detect malicious traffic patterns [12], or to keep track of the values of two important variables associated with TCP connections [10]: the sender s congestion window (cwnd) and the connection round trip time (RTT). We present a combinatorial view of the problem, giving rise to complexity and approximability results, as well as efficient Mixed Integer Programming (MIP) formulations. The main advantages of such kind of modeling is that it formalizes all greedy solutions that we proposed in prior work [3] and that were also simultaneously and independently applied in [22]. Moreover, from this new model we are able to derive MIP formulations even for the minimization of the deployment and the exploitation cost while maximizing the total amount of traffic monitored whereas in [22], the authors only present a mixedinteger nonlinear program formulation of the problem. Finally, this formulation allows tackling slightly different problems. For instance, it is possible to compute incremental solutions. From a set of already installed devices that cannot move, the program can compute the best way to position a new set of monitors. This problem can be derived into the estimation of the expected gain in buying one or a set of new devices. It is also possible, by only adding a constraint in the modeling, to address the problem of finding the best positioning of a limited number of devices. Since the traffic inside a POP may evolve one may point out that a drastic change in the traffic throughput may invalidate all previous optimizations done and will degrade the results that the operator will get. To overcome this problem, we present an efficient polynomial algorithm that will recompute optimal sampling rates for all monitoring devices already deployed in order to maximize the coverage while minimizing the exploitation cost. Concerning active monitoring, we use the same strategy to improve the twophased approach presented in [1] and [15] to optimize both the number of devices and the number of generated messages. The remaining of this paper is organized as follows. Section 2 presents the global architecture. Section 3 discusses related work. The main discussion begins in Section 4 in which we describe our main contribution on passive devices positioning when taking into account the deployment cost and we show simulation results. In section 5 we extend the results on passive monitoring by introducing a sampling capability to each monitoring device and by taking into account an associated exploitation cost. In Section 6 we focus on active monitoring for which a similar strategy is used to improve beacons positioning. Finally Section 7 summarizes the results presented and discusses their implications on current monitoring strategies. Possible extensions to this work open for investigation are discussed. 2. GENERAL ARCHITECTURE We present in this section the general network architecture considered in our study. We focus on the POP architecture and topology since POPs represent the key place where monitoring can be performed efficiently. Monitoring traffic in a POP may help to analyze the traffic demand between a pair of POPs [2] or to derive methodology that observes the sendertoreceiver and receivertosender segments in a TCP connection, and infers/tracks the time evolution of the sender s congestion window and the connection round trip time [10]. Individual customers Local ISP POP POP POP ISP 1 backbone Peering link Corporate network POP POP ISP 2 backbone POP Server Figure 1: Internet ISP backbone. ISP backbones are composed of several POPs connected together by high bandwidth backbone links. The Internet ISP backbones are composed of multiple points of presence or POPs connected together by high bandwidth backbone links, as shown in Figure 1. Each POP corresponds to a physical location where the ISP houses a collection of routers. The ISP backbone connects these POPs, and the routers attached to interpop links are called backbone or core routers. Each POP also locally connects through access links customers ranging from large corporate networks to regional ISPs and webservers. The POP routers attached to customers are called access routers. Within every POP, access routers provide an intermediate layer between the ISP backbone and routers in neighboring networks. Note that peering between POPs is provided either through dedicated links to another backbone (private peering) or through public Network Access Points (NAPs). To summarize, the general topology of a POP may be modeled by a twolevel hierarchical structure as depicted in Figure 2. At the lower level, customer links are connected to access routers. These access routers are in turn connected to the backbone routers. The backbone routers provide connectivity to other POPs and to the peers. 3. STATE OF THE ART Several famous projects focused on network performance measurements. Metrology and monitoring are ongoing studies all around the world. The IPPM working group at IETF
3 Web Server Other ISP Peering link Access Router Backbone Router Backbone Router Backbone Backbone Router Backbone Router Peering link Figure 2: POP architecture composed of backbone routers and access routers. related to IP Performance Metrics [17] develops a set of standard metrics that can be applied to the quality, performance, and reliability of Internet data delivery services; the IPFI working group related to IP Flow Information Export [18] aims to produce standardstrack documents describing the IPFI architecture, i.e., information model and flow export protocol RFCs; the BMWG working group related to Benchmarking Methodology makes a series of recommendations concerning the measurement of the performance characteristics of various internetworking technologies; the PSAMP working group related to Packet Sampling and the IMRG research group at IRTF focused on Internet Measurement. There also exist several large scale platforms and ambitious projects launched to measure the global internet: NIMI (National Internet Measurement Infrastructure) [16], NLANR Measurement and Network Analysis Group (NLANR/ MNA) focused on the characterization of the behavior of high performance connection networks, and the IP Monitoring Project (IPMON) 1 at Sprint which is focused on building a general purpose measurement system for IP networks capable of collecting both detailed packetlevel traffic statistics as well as delay, loss, and other network performance statistics. It is obvious that network measurements are essential for assessing performance issues, identifying and locating problems. Network traffic measurements provide essential data for networking research and operation. The strategy to obtain network information through endtoend measurements, known as Internet tomography, is therefore of great interest to the research community [8, 11, 21]. The majority of contributions on network tomography concentrates on either topology discovery, or link delay monitoring. A research [2] studies traffic demands in an IP backbone (collected at a major POP in a commercial Tier1 IP backbone), identifies the routes used by these demands, and evaluates traffic granularity levels that are attractive for improving the poor load balancing that exists in POPs. In [10], the authors propose a passive measurement methodology to infer and keep track of the sender s congestion window (cwnd) and the connection round trip time (RTT) in order to provide a valuable diagnostic of enduserperceived network performance. For passive monitoring, one should place passive devices (generally an optical splitter that copies all the data on the link 2 ) Other ISP to tap the link on which data needs to be collected, and to record to disks a part of all packets, usually including a timestamp that indicates their arrival time. Some recent researches show that active measurements can also be used to locate failures in IP networks [9, 15, 1]. Indeed, IP networks do not typically generate feedback state information, thus in order to perform traffic engineering, active monitoring should be deployed inside POPs. Active probing can help to detect and to locate link failure. An active probing system consists of several measurement points. Each measurement point, called a beacon, can send IP messages to all nodes in the network. Each message sent from a beacon to a network node for the purpose of monitoring is called a probe. A failure is detected when consecutive probes do not use the same path in the network [15]. All these research studies and projects use extensively monitoring for diagnosis: detecting and reporting problems or anomalies, management, configuration problems, resource provisioning, network dimensioning, valueadded service, feedback to customers; Network Intrusion Detection Systems use passive network monitoring extensively to detect possible threats... However, collecting traffic data and analyzing such data from a Tier1 ISP backbone reveals to be a real challenging task since it is expensive and timeconsuming to deploy tap devices or active beacons in operational network. The measurement equipment must be installed in commercial network facilities where physical space and power are constrained, and which are, in some cases, not stalled by any human operators. Moreover, the traffic volume ranges from tens of Mb/s on OC3 access links to 10 Gb/s on OC192 backbone links, whereas data analysis involves processing terabytes of data. In all projects and approaches listed above, the key objective is to minimize the overhead (cost, management as well as deployment), in terms of number of tap devices for passive monitoring or in terms of number of active beacons and volume of additional traffic for active monitoring. Thus, minimizing the number of devices and finding optimal strategic locations is a key issue, mandatory for deploying scalable monitoring platforms. [22] present heuristics for positioning passive monitors in POP and controlling their sampling rate, when monitors do only capture a portion of the traffic carried by the link they are attached to. They consider three main problems, the first one consisting in maximizing the volume of captured traffic under cost constraints, each monitoring device having a deployment and an operational cost. The second problem consists in minimizing the deployment cost to achieve a monitoring objective and the last one consists in minimizing both installation and operational cost under the same objective. They show that all these problems are NPcomplete and they present heuristics approximating the optimal solution for each one. They evaluate the performance of the proposed algorithms with simulations on topologies discovered by the Rocketfuel utility and with generated traffic matrices. 4. PASSIVE MONITORING In this section, we consider passive monitoring. As mentioned in Introduction, passive monitoring does not introduce traffic overhead in the network. On the other hand, the devices that monitor the traffic may be very expensive due to the requirements for processing and storing collected data. It is thus very important to minimize the number of
4 such devices to install and maintain in the network. Moreover, as stated in Introduction, it is not necessary to monitor the whole traffic and only a percentage may be enough. In the following we present a combinatorial view of the problem, giving rise to complexity and approximability results, as well as efficient Mixed Integer Programming (MIP) formulations. 4.1 Combinatorial model Before formalizing the problem, we describe the network model we use. Let us consider a POP, this network can be modeled as a graph G = (V, E) where V is the set of nodes that represent the routers and E is the set of edges that represent the communication links that connect the routers. A traffic t in this network is a single path p t between two routers, or nodes of V, and a weight v t given by the bandwidth routed along this path. Such a traffic is the aggregation of all IP flows which follows the path p t through the POP. This path is defined by the internal routing strategy deployed by the ISP. We call the load of a link the sum of the weights of all the traffic that flow on this link. In this first study, we consider that a measurement point installed on a link e monitors all the traffic that flows on e. Therefore, monitoring a proportion k (0 < k 1) of the traffics carried by the network consists in selecting a subset of the links where to install measurement points, so that enough traffics are conveyed by monitored links. The Partial Passive Monitoring problem is to find such a subset of a minimum size. This problem is denoted P P M(k) for short, and can be stated as follows: INSTANCE k ]0, 1], G = (V, E) a graph, D = {(p i, v i)} a set of weighted paths (traffics). V = P i vi is the total bandwidth carried by the network. SOLUTION A subset E E of selected edges such that P i e E,e p i v i kv meaning that the sum of the weights of the paths that go across a selected edge is greater than a proportion k of V. MEASURE Cardinality of E. Note that P P M(1) consists in monitoring all the traffics in the network and is henceforth called the Passive Monitoring problem. Local ISP 1 Local ISP 2 Corporate Network Backbone Figure 3: Passive measurement on a POP example In the following, this combinatorial formulation is used for deriving complexity and approximability results. c 1 u 1 c 2 c 3 u 3 u 2 c 4 u 4 c5 Minimum Set Cover p 2 c 1 c 2 c 3 p 1 p 4 c 5 p 3 Monitoring Figure 4: MSC  P P M(1) equivalence 4.2 Complexity of Passive Monitoring In this part, we focus on the Passive Monitoring, that is the specific case of P P M(k) where k = 1. We prove that this case of the monitoring problem is equivalent to the Minimum Set Cover problem, yielding NPcompleteness and tight approximability results. Minimum Set Cover. Suppose that a set S of arbitrary items is given, as well as a collection of overlapping subsets of S. The Minimum Set cover problem, MSC for short, consists in finding a minimum size subcollection such that any item belongs to a selected set. MSC can be stated as follows. INSTANCE Collection C = {c 1,... c m} of subsets of a finite set S = {u 1,..., u n}. SOLUTION A set cover for S, i.e., a subset C C such that every element in S belongs to at least one member of C. MEASURE Cardinality of the set cover, i.e., C. Equivalence and complexity. Intuitively, the items represent the traffics while the subsets are the links of the network. MSC models the optimization goal of installing measurement points on a minimum size set of links, such that any traffic belongs to a selected link. The following theorem claims that both MSC and P P M(1) are equivalent. Theorem 1. The Monitoring problem for k = 1 is equivalent to the Minimum Set Cover problem. Proof: At first we construct an instance of the monitoring problem from an arbitrary instance of Minimum Set Cover as depicted in Figure 4. Let G be a graph whose edge set E is defined as follows: E contains an edge e i for each c i C, if c i c j Ø, E contains an edge e ij and an edge e ji, both adjacent to e i and e j so that these four edges form a cycle, Note that only 2 C vertices are necessary to define E and thus G. Then the set of traffics, D, contains a traffic t i for each element u i of S. The path p i associated to t i goes through c 4
5 edge e j if and only if u i belongs to c j. In addition p i can use any edge e jk provided it also uses e j and e k. Such paths can always be found 3 in polynomial time by construction of G. Since the whole traffic is to be monitored, assigning them a volume is useless. Now suppose E is an optimal solution of this monitoring instance. Then we deduce an optimal solution C for the Minimum Set Cover instance from E in the following way: if e i E, then c i C, if e ij E, then neither e i nor e j belongs to E otherwise e ij would be redundant and E would not be optimal. Thus e ij can be replaced either by e i or by e j in E, which means, either c i C or c j C, The minimum cardinality of E implies the same property on C which is therefore an optimal cover for this Minimum Set Cover instance. Subsequently, consider an instance of the monitoring problem on a graph G = (V, E) for which k = 1. Each edge e of G belongs to a set π e of paths of D. Installing a measurement point on e means that every p i π e D is monitored. An instance of MSC can be constructed from this monitoring problem taking S = D and C = {π e, e E}. It is clear that an optimal solution for MSC yields an optimal solution for the monitoring problem. This completes the proof of the equivalence of these two problems. As far as MSC is a NPComplete problem, previous theorem implies directly the NPcompleteness of P P M(1), hence the NPcompleteness of P P M(k), 0 < k 1. If all traffics carry the same bandwidth, the problem becomes unweighted. Following the same scheme as above, one can prove the equivalence of the unweighted version of P P M(k) to the Minimum Partial Cover Problem (see [19, 20] for a definition of the problem). This gives a straightforward proof of the NPcompleteness of unweighted P P M(k), for any given k, 0 < k < 1. Approximability results. Since computing an optimal solution is a NPcomplete problem, one can prefer to derive approximate solution. A kapproximation is a feasible solution of the problem such that its cost is always bounded by k times the cost of an optimal solution. The Minimum Set Cover problem is approximable within ln S ln ln S + o(1) [19] with a simple greedy algorithm. The preceding equivalence result hence yields a polynomial time (ln D ln ln D + o(1))approximation algorithm for the Passive Monitoring problem. Moreover, the Minimum Set Cover is not approximable within (1 ε) ln S for any ε > 0, unless NP Dtime(n log log n ) [7], so the Passive Monitoring problem is not approximable within (1 ε) ln D for any ε > 0, unless NP Dtime(n log log n ). In the following, we show that P P M(k) can be modeled as a Minimum Edge Cost Flow in an auxiliary graph. This combinational model gives rise to efficient MIP formulations improving previous results of the literature, as well as an expressive theoretical framework for developing a more detailed and realistic model. 3 Arbitrarily order the edges p i has to use, by construction as u i belongs both to c j and c k there is an edge e jk linking the two consecutive edges e j and e k. 4.3 Partial Passive Monitoring For all k 1, we now introduce a model of the partial monitoring problem as a Minimum Edge Cost Flow, MECF for short, in an auxiliary graph. The main advantage of such kind of model is that it leads to a mixed integer program whose computational time is better than those of [3, 22]. Another key advantage of the Minimum Edge Cost Flow model is that it formalizes all greedy solutions generally proposed [3, 22] to solve such a class of problems. All greedy approaches use a natural way to solve P P M(k): the most loaded link is chosen first, and so on and so forth. This algorithm does not of course lead to an optimal solution, but rather to a (ln D ln ln D +o(1))approximation since it is also related to the greedy algorithm for the Minimum Partial Cover Problem analyzed in [19]. For example in Figure 3, the POP carries four traffics, two of weight 2 and two of weight 1 and we want to find a solution to P P M(1). The greedy approach selects the link with the two traffics of weight 2 first, i.e. the link of weight 4. In order to monitor all the traffics, we need to select other links, for instance the two links with weight 1. This solution gives three measurement points, whereas an optimal solution is to place two measurement points on the two links of weight 3. Minimum Edge Cost Flow formulation. The MECF is a regular minimum cost flow problem, except a binary cost function, as stated below. INSTANCE G = (W, A) a directed graph, each arc a A has a capacity u a and a constant cost c a, a flow request of volume F from a source vertex S W to a sink vertex T W, SOLUTION a S T flow f satisfying the request, MEASURE the cost of f, note that an arc a costs c a whenever the flow on arc a f a > 0, and 0 otherwise, In the following, we show how to convert a P P M(k) instance into a MECF instance. This transformation allows a better understanding of the combinatorial challenges yielded by P P M(k), hence creating a combinatorial framework for heuristics development and analysis, and leading to an efficient MIP formulation. Given an arbitrary instance of P P M(k), 0 < k 1, let us define the following instance of MECF : First a directed graph G = (W, A) has to be defined: 1. W contains a vertex w e for each edge e E, 2. W contains a vertex w t for each traffic t D, 3. W contains two additional vertices S and T, 4. there is an arc of unbounded capacity and cost 1 in A from S to each w e. Thus each arc (S, w e) corresponds to an edge e of the Monitoring instance, 5. there is an arc in A from w e to w t if and only if the path p associated to traffic t uses edge e. The capacity of such a arc is unbounded and its costs is null. These arcs represent the edgepath adjacency relation of the Monitoring instance, 6. there is an arc of capacity v t, the volume of traffic t, and null cost in A from each w t to T.
6 e1 t2 e4 t3 e6,, v2 v3, 1 t 1, v 1 e2, e3 e5 e7 E t4 v4 e7 S e1 e2 e3 e4 e5, 0 D t1 t2 t3 v2 v3 v1, 0, 0 v4, 0, 0 T w e and w t exists. For each edge e E we add a flow of value v t on path p e t if p t uses edge e in the Monitoring instance and if t has not been treated by another edge yet. As a traffic t is treated only once, the capacity constraint on arc (w t, T ) in the Minimum Edge Cost Flow instance is respected, and the flow value is at least k P t D vt since the volume of traffic monitored is at least of this amount. Thus this flow is a solution of the Minimum Edge Cost Flow but its cost is lower than the cost of E, which contradicts the optimality of E. Monitoring e6 Minimum Edge Cost Flow Figure 5: MECF instance for P P M(k) Then, the objective is to route from S to T a volume of flow equal to the volume of traffic to be monitored, k P t D vt. Intuitively, the link between S and a w e will support a flow if a measurement point is installed on e. The following theorem claims that the previous MECF instance actually solves P P M(k). Theorem 2. An optimal MECF solution on G yields an optimal solution for P P M(k) on G. Proof: Consider a flow f solution of this Minimum Edge Cost Flow instance, it can be interpreted according to the Monitoring instance. Note that the only arcs of non null cost are the (S, w e) arcs, therefore the cost of a solution equals the number of arcs (S, w e) supporting non null flow. The set of edges of the Monitoring instance corresponding to these arcs is referred to as E. In a solution of the Minimum Edge Cost Flow, the flow on arc (w t, T ) may come from several arcs (w e, w t) and thus according to our present interpretation, the traffic t may be partitioned, each part being monitored on a different edge. Although this would not be in accordance with the monitoring without sampling problem, we can assume it never happens, otherwise it would be easy to deport all flow corresponding to traffic t on a single path since capacities are unbounded on all arcs but the (w t, T ) ones. In addition no more than a volume v t of traffic t can be taken into account in the Minimum Edge Cost Flow solution since the capacity of an arc (w t, T ) is v t. At last the total volume of flow going through vertices w e e E is at least k Pt D vt and has to go through arcs (w t, T ) which are reachable from these w e, i.e. the arcs (w t, T ) corresponding to traffics using the edges e E. E is therefore a solution of the Monitoring instance, and the volume of flow routed through both w e and w t represents the volume of traffic t that the measurement point on edge e has to monitor. Furthermore, if E is an optimal solution of the Minimum Edge Cost Flow instance, it is also an optimal solution of the Monitoring instance. Otherwise, let E be an optimal solution of the Monitoring instance, then E < E because every solution of the Minimum Edge Cost Flow instance is a solution of the Monitoring instance and E is not one of its optimal solutions. On the other hand, a solution of the Minimum Edge Cost Flow instance can be built from E in the following way. First note that only one path, p e t that goes through both t4 Heuristics. Several previous papers proposed heuristics for P P M(k) [3, 22]. They share a common general idea which is to always choose the edge which permits to monitor the larger volume of traffic not monitored yet, until the objective is attained. The MECF framework allows to analyze these heuristics in terms of flow. As a matter of fact, these heuristics appear as the computation of a minimum cost S T flow in the MECF graph modeling of the Monitoring problem. This is indeed a linear relaxation of MECF where the costs are no more binary but linear. In this relaxation, the link cost on (S, w e) arcs, is the inverse of the load of edge e E. On every other arc, the link cost is null, like in the MECF instance. Such a link cost configuration models the greedy behavior of previously defined heuristics. The MECF framework allows to develop other flowbased heuristics such as randomized rounding or branching algorithms. Unfortunately, the general case of MECF does not admit a 2 log 1 ɛn approximation, for every constant ɛ > 0, unless NP DT IME(n polylog n ) [6]. Even though the MECF instances related to P P M(k) are very specific, the results derived for the unweighted case from the Minimum Partial Cover Problem shows nonapproximability properties that are to be refined. MIP formulation. There are two usual linear programming formulations of flow problems, the arcpath one and the vertexarc one. Program 1 is the arcpath formulation to which binary variables (x e) are added, representing whether an arc supports a non null flow or not. Corresponding constraints which permit to set these variables are also added. Linear program 1 (PPM(k)). Minimize s.t. e E x e e f t t π e e f t e p t e f t t D e p t e f t x e t π e v t v t t D k t D v t e E 0 e E t π e x e {0, 1} e E f t e : volume of flow on the path which goes through both w e and w t e E t π e, x e: 0 if the flow on arc (S, w e) is null, 1 otherwise,
7 The first constraint means that the flow on paths going through vertex w e cannot be positive if the arc (S, w e) has not been payed for, the second constraint represents the capacity constraint on every arc (w t, T ), the third one represents the satisfaction of the flow request of volume k P t D vt. The cost function is the number of arcs (S, w e) supporting a non null flow. This formulation can be slightly modified to let appear it is a relaxation of the binary programs of [3, 22]. Actually rename δ t the sum 1 v t Pe p t f e t and note that the first constraint can be replaced by: f e t x ev t t D e p t and that these new constraints can be added to obtain: δ t P e p t x e t D. Then the following formulation is obtained: Linear program 2 (PPM(k)). Minimize t.q. e E x e x e δ t t D e p t v t δ t v t k t D t D δ t [0, 1] t D x e {0, 1} e E in the opposite direction from node v to node u. Note that we consider the traffic entering and leaving the POP. Therefore the generated network includes some virtual nodes that represent sources and targets of the traffic and that are not considered as routers in the POP. Since we do not have real available data of traffic matrix issued from the considered POP topologies, we randomly generate several traffic matrices. In [2], the authors analysis shows that the geographical spread of traffic across egress POPs is far from uniform. They do explain that this nonuniform behavior comes from the intrinsic way the Internet is designed (e.g., some POPs would sink higher traffic demands than others because of their geographical location). In order not to generate uniform traffic distribution between all access routers and backbone routers, we randomly pick some preferred pairs of high traffic (for example between two backbone routers or between one backbone router and one access router that would host a popular web site). Figure 6 shows a simple POP and the traffic load generated randomly. x e is equal to 1 if a measurement point is installed on e, to 0 otherwise, δ t is the percentage of the volume of traffic t monitored, This formulation also allows to compute an incremental solution: suppose that a whole monitoring architecture is already setup and new measurement devices are available, then one problem may be to maximize the number of monitored traffic with these new devices without moving the devices already located. The variables x i associated to the previously monitored link are fixed to 1 and treated as constants, and the mixed integer programming is applied to the problem in which the unknown variables correspond to the links not monitored. It is also possible, with only a slight modification of the program, to address situations in which an operator seeks how to optimally position a limited number of monitoring devices, simply by adding a constraint on the maximum number of affordable measurement points. 4.4 Simulation results In order to evaluate and compare the greedy approach that selects links in decreasing weight order and our mixed integer programing formulation of the Partial Passive Monitoring problem we run simulations on several POP topologies. We use ISP topologies that are inferred by the Rocketfuel tool [21]. For the sake of simplicity, we assume as in [15] that the traffic inside a POP uses shortest path routing from router s where it is entering the POP to router t where it is leaving the POP. As opposed to [1] we do not make the assumption that the routing uses symmetric path, that is, that the path P u,v used for routing from u to v is the routing path Figure 6: Traffic weight on a simple POP. The thickness of an edge represents the percentage of traffic on this edge. Our traffic matrix does not generate uniform traffic. All the results are an average over 20 simulations. To solve this 0 1 MIP problem we use CPLE solver. Nevertheless, this linear programming code can handle integer programming. Figure 7 presents the results for the devices placement on a POP with 10 routers. In this configuration, the POP has 27 links and 132 traffics go through this POP. We compare our algorithm with the greedy algorithm. The xaxis corresponds to the percentage of traffic that is monitored (we start from 75%), and the yaxis is the number of devices located by the solutions. First we see that, until 95%, with our solution, the number of located devices is almost linear in the percentage of the monitored traffic. But when the percentage switches from 95% to 100%, the number of required devices drastically increases: we need twice more devices to monitor extra 5% percent of the traffic. This result indicates that it can be worthy in terms of cost overhead not to monitor all the traffics but only 95% of them. Of course, our solution is better than the greedy, which is not surprising, but we also see that in average, the greedy solution is twice as large as our solution. Figure 8 presents the results for the devices placement on
8 20 18 Greedy algorithm ILP Greedy algorithm ILP Number of monitoring devices Number of monitoring devices Percentage of monitored traffic Percentage of monitored traffic Figure 7: Passive monitoring: devices placement on a 10 routers POP Figure 8: Passive monitoring: devices placement on a 15 routers POP a POP with 15 routers. This POP has 71 links and there are 1980 traffic flowing in the POP. We also compare our solution with the greedy solution and the axis are equivalent to the ones of Figure 7. In this case, we can observe three steps: from 75% to 85%, the increase of located devices linearly increases with the percentage, then from 85% to 95%, the increase is also linear but the slope is larger, and finally there is a big increase in the number of located devices when we switch from 95% to 100% of the monitored traffic. In that case, the number of devices ranges from 16 to 41. This leads us to the same conclusion as with the previous result: it can be very cost effective to monitor only 95% of the traffic. We see also that, not surprisingly, our algorithm still performs better than the greedy solution, but the gap in that case is smaller than the one obtained on a POP with 10 routers. This is probably due to the fact that the traffic, even if it is nonuniform, is more concentrated in the POP with 10 routers and thus better balanced than in a POP with 15 routers. With the presence of more uniform traffics, it is probably easier to find counterexample topologies as the one we presented in Figure 3 and therefore the optimization is more effective. 5. PASSIVE MONITORING AND PACKET SAMPLING Due to the huge number of packets going through a router on a high speed link (OC48, OC192, OC255), the necessity of reducing the volume of monitored data is perfectly understandable. Reducing the amount of packets processed and stored may reduce the exploitation cost of the monitoring devices deployed inside the network. The ratio of packet sampling will depend on the exploitation cost of the devices and thus of the cost per packets and it may vary from one device to another one. When sampling is available, the passive monitoring consists in placing devices in order to monitor at least k % of the total traffic while minimizing the setup cost induced by each device installed and the exploitation cost induced by the sampling ratio assigned to each device. In the remainder we consider multirouting. Indeed, for the sake of load balancing, the internal routing strategy deployed by the ISP might use several routes between a pair of source/destination routers. In previous sections, such a situation was tackled by considering each weighted route as a whole traffic. In the following, a traffic is given as a set of weighted routes between the source and the destination routers of the traffic. In combinatorial terms, a traffic is therefore a set of weighted paths between the same pair of source/destination nodes (u,v). Let either P u,v or P t denote the set of paths associated with traffic t of source u and destination v and P = tp t. Consequently, the administrator of the POP might need to monitor a part of each traffic, without necessarily monitoring every path. We therefore introduce h t, the minimum monitoring ratio of a traffic t. Note that we have h t k since h t is related to the minimum cover of a traffic t whereas k is related to the minimum cover of the global amount of traffic. 5.1 Reducing the amount of data Techniques to reduce the amount of data treated and stored may be classified into three main classes: Filtering: it consists in capturing only a subset of the frames based on some networking criteria (protocol, port number,...); Classification: packets can also be classified into classes, statistics being calculated class by class; Sampling: packets can be captured randomly. Sampling has many advantages. First, it does not require much computation, compared to the two other techniques, to filter or classify frames. Secondly, it does not require any configuration and is therefore more adaptive to new traffic patterns and therefore more able to detect malicious traffic. 5.2 Sampling techniques Sampling, and reduction of the number of considered frames in general, raised many problems. Using only a subset of the frames to compute statistics biases the estimation and it is not always easy or even possible to infer the characteristics
9 of the original traffic from the sampled trace. The way packets are sampled has a great influence on the conclusions it is possible to draw from the reduced trace. In [4], Duffield presents different sampling techniques and their associated tradeoffs. Timebased sampling: the monitor captures frames at regular timeintervals. This technique can suffer from timeconstrained applications that send packets regularly. On lowspeed links especially, there is a risk of only considering a subset of the flows and systematically missing important information. Regular sampling: the monitor captures exactly one frame every N frame. This technique exhibits better results than the previous one, as it is more likely to capture packets belonging to a burst. Nevertheless, it is still influenced by periodical traffics. Probabilistic sampling: the monitor captures frames with a probability 1/N. Probability distributionbased sampling: the monitor captures one frame every, being a random variable following a given law (geometric, exponential) with mean N. The french national project Metropolis 4 has studied the influence of this type of sampling on the perception of the flows in the network. Considering only one frame out of 1000, they use the classical mice (designing short flows) and elephant (designing long flows) separation of the flows and show sampling creates problems related to flows identification. With only one packet out of 1000, it is difficult to decide in which category fits one flow, as there is a low probability to monitor more than one or two packets of each elephant flow. Concerning mice, which is the most common type of flows, most of these flows will not be monitored and statistics drawn on sampled traces tend to overestimate the volume of mice flows while increasing the corresponding estimated volume. Some contributions [5, 14] study the problem of enhancing the estimation of the characteristics of the traffic from the sampled statistics. [14] studies more specifically the problem of identifying elephant flows with periodically sampled frames. They use the Bayes theorem to estimate the probability that a flow presenting more than y frames in the sampled trace is composed of more than x frames in the complete trace. [5] proposes that monitors count SYN packets, identifying the start of most of TCP connections, in order to estimate more accurately the number of flows. From this estimation, it is easier to infer real statistics from the sampled trace. [22] considers sampling in the Budget Constrained Max Coverage Problem, i.e. the problem of finding the best positioning of monitoring devices under cost constraints, limiting the number of these devices. They consider that multiple devices monitoring different links carrying the same flow will only monitor this flow once. On the opposite, by using packets marking techniques, successively monitoring the same flow can lead to a monitoring percentage equal to the sum of the sampling rates. 4 eng.html Nevertheless, one can expect that monitoring several times a single flow in a cascade of tap devices may produce more detailed statistics than a single tap device would. 5.3 Model for sampling & monitoring In this section, we represent the setup cost of a tap device on a link e by cost i(e) and the exploitation cost of the same monitoring device cost e(e). These two cost functions can be general and this will not impact on the following linear program 3. However, the exploitation cost is generally a nondecreasing concave function [22] that allows to take into account the scale factor effect. Note also that the model of [22] is a mixed non linear program, while the one presented in this section is a MILP that can be solved much faster, even though it keeps being nonpolynomial. Linear program 3 Minimize s.t. P e E (PPME(h,k)). (costi(e) xe + coste(e) re) set up cost and exploitation cost r e δ p p P e p x e r e e E δ p v p h t v p p P t p P t δ p v p k p P p P v p for all traffic t δ p, r e [0, 1] p P, e E x e {0, 1} e E As for the linear program 2, the variable x e reflects the fact that a monitoring device is setup on the link e. The variable δ p here represents the amount of monitored traffic going through path p. We introduce here the variables r e that represent the sampling ratio of the monitoring device located on the link e. We also need to introduce some constraints. The first one is trivial and only models the fact that it is necessary to setup a device on a link if we want to sample traffic on this link. Next constraints ensure that a minimum percentage h t of each traffic t is monitored and that at least k percent of the total amount of traffic is also monitored. 5.4 Dynamic traffic Being able to minimize the number of devices under the deployment cost and exploitation cost is possible thanks to the integer linear problems described above. However, these techniques capture static network state while the real traffic inside a POP evolves. A drastic change in the traffic throughput may invalidate all previous optimizations done and will degrade the results the operator will obtain. If it is really not conceivable to migrate a tap device from one link to another one at each traffic fluctuation since it implies human maintenance on each router, it is still possible to consider that the sampling ratio will be adapted to the traffic changes. The problem is thus to find a solution to the problem P P ME(h, k) when all x e are a priori fixed since all devices are already installed. We will call this problem P P ME (x, h, k). The P P ME (x, h, k) problem can be written as the linear program 3 where all x e are now constants. Thus there is no
10 more binary variables and it is possible to derive optimal solution in a polynomial time. In fact, it is worthy to note that this problem can be expressed as a minimum cost flow problem for which efficient polynomial time algorithms are available without the need of linear programming anymore. If an operator has to respect a minimum percent of monitoring h t per traffic t and at least k percent of the total amount of traffic, we can define a tolerance threshold T < k under which the degradation of monitoring becomes critical and the solution has to be updated. One can therefore derive a simple strategy to maintain the monitoring constraints inside a POP: 1. While P p P δp vp T Pp P vp, wait; 2. When P p P δp vp < T Pp P vp, compute P P ME (x, h, k), update all sampling rates; 3. Goto 1. The resolution of the P P ME problem can be considered as the initial phase when building the POP. For such an initial phase the time complexity is not really crucial. However, during the life time of a POP, being able to adapt to traffic changes may be important and thus the time complexity becomes a key factor. As mentioned above, the computation of P P ME is efficient and since it is equivalent to a minimum cost flow computation it does not require a large amount of resources. 6. ACTIVE MONITORING Active monitoring has received much more attention than passive monitoring in the literature. If this approach implies overhead traffic, it keeps a control on the measurement. Usually, the objective is to find the minimum number of beacons (i.e. nodes in charge of the monitoring task and emitting packets) whose probes (i.e. the packets emitted by the beacons) cover all the links in the network (see [1, 9] for recent references). When the beacons are chosen, the smallest set of probes has to be computed. Recently, the authors of [15] proposed a different approach: starting from a set of possible beacons, they first compute an optimal set of probes and then locate the beacons. They show that the beacon placement problem is NPhard and use a greedy algorithm for this problem: they first select a beacon, remove the set of probes that can be sent with this beacon, and so on. 6.1 The problem For this problem, we use the network model of [15], i.e. an undirected graph G = (V, E) with V the set of nodes that represent the network elements and E the set of edges that represent the links connecting the elements. The network has a set of possible beacons, called V B henceforth (V B V ). Starting from this set V B, the authors of [15] designed a polynomial algorithm that computes the optimal set of probes. Then from this set of probes, they choose the effective beacons. In this section, we propose to optimize this placement phase. Note that in this problem, the beacons are placed on the nodes (the routers) and not on the links unlike the passive monitoring. The beacon placement problem can be translated into a 0 1 Integer Linear Programming problem. Assume that Φ is the optimal set of probes obtained with the algorithm of [15]. Each probe ϕ Φ is identified by its two extremities ϕ u and ϕ v, knowing that the probe from ϕ u to ϕ v is equal to the probe from ϕ v to ϕ u. The Integer Linear Programming problem is the following: min n i=1 y i s.t. i V \V B y i = 0 and ϕ Φ, y ϕu + y ϕv 1 i V, y i {0, 1} where n is the number of nodes in the network and y = (y i) i V is the variable (y i = 1 places a beacon on node i in the network, y i = 0 otherwise). It is easy to see that this ILP problem is equivalent to the beacon placement problem: the first constraint prevents from placing beacons on forbidden nodes, i.e. nodes not in V B, the second constraint ensures that each probe of Φ will be sent by one beacon and the goal is to minimize the number of located beacons. Note that we can also propose a greedy solution that should give better results than the one of [15]. Rather than arbitrarily choosing beacons, we can select the beacon that will generate the greatest number of probes first, then remove these probes from the set of probes, and so on. We also test this greedy solution in our simulations. 6.2 Simulation results The POP topology is generated with the same way as in Section 4. We have implemented the algorithm of [15] that computes the optimal set of probes. From this set Φ, we compute the beacons placement with the algorithm proposed in [15], our greedy algorithm and our ILP solution. Again, to solve the 0 1 ILP problem we use CPLE solver. All the results are the average over 20 simulations. Number of beacons selected Number of selectable beacons Thiran Greedy ILP Figure 9: Active monitoring: beacons placement on a 15 routers POP Figure 9 presents the results for the beacons placement on a POP with 15 routers. We compare the algorithm of [15] (called Thiran in the figure), our greedy algorithm (called greedy in the figure) and our solution based on an ILP formulation. The xaxis is the size of V B (i.e. the potential
11 beacons) and yaxis gives the number of located beacons. We see that, not surprisingly, our solution always places the fewest number of beacons and the gap between the algorithm [15] and our solution increases with the number of possible beacons (size of V B). This may be explained by the fact that when V B is small there are few possible optimizations, whereas when V B is large there are more opportunities to optimize the beacons placement, and in that case the ILP formulation is effective. When V B = 15, our solution decreases by a factor 2, the solution of [15]. Note that our greedy solution gives also good results compared to the algorithm of [15] and is quite close to the ILP solution since for 8 possible beacons they differ only by 1 in the number of located beacons. Figure 11 presents the results for the beacon placement on a POP with 80 routers. Once again the same kind of conclusions can be drawn. The number of beacons is also reduced by 33% when we use our algorithm instead of the algorithm of [15]. Note that in that case, the differences between our greedy solution and our ILP solution are more noteworthy than in the other POPs tested. With 80 possible beacons, the greedy solution places 7 extra beacons. In all the curves, the number of located beacons decreases from a certain threshold on V B with the ILP solution (it is also the case for the other solutions but not with all the topologies). It seems that having more opportunities to place the beacons allows a better placement of the beacons. Therefore, it may be more interesting to offer a larger set of routers to place the beacons. Number of beacons selected Number of selectable beacons Thiran Greedy ILP Figure 10: Active monitoring: beacons placement on a 29 routers POP Figure 10 presents the results for the beacon placement on a POP with 29 routers. They are similar to the results obtained with 15 routers. The ILP solution matches the two greedy solutions and the best result is obtained on a POP with 29 routers: the number of beacons is reduced by 33%. Our greedy algorithm is also very close to the ILP solution: they differ of at most 2 beacons for 15 possible beacons. Number of beacons selected Number of selectable beacons Thiran Greedy ILP Figure 11: Active monitoring: beacons placement on a 80 routers POP 7. CONCLUSION In this paper, we have provided novel contributions and addressed several issues concerning the positioning of passive and active monitoring devices. We have provided a powerful combinatorial model of the partial passive monitoring problem in terms of Min Edge Cost Flow, Minimum Set Cover and Minimum Partial Cover. This model yields a theoretical framework for understanding the combinatorial challenges of measurement point placement. It also permits to develop an efficient mixed integer program, greatly improving on previous formulations given in the literature, and giving rise to an efficient polynomial algorithm for managing dynamic traffic. The mixed integer programming formulation is flexible enough to easily tackle different problems, or subproblems, such as computing the best way to position a new set of monitors over an already installed fixed monitoring architecture, to estimate the expected gain in buying one or a set of new devices or the problem of finding the best position for a limited number of devices. Our approach based on MIP is also useful for active monitoring when the goal is to minimize the number of beacons set up in the POP network. We proposed one very simple greedy algorithm and one MIP based approach that both outperform the heuristic proposed in [15]. Note that our greedy solution has good performance on not too large POP (like 15 and 29 routers). For the future, several possible extensions of this work are open to investigation. We are currently working on three different perspectives. First, the model of sampling capable devices has to be refined in order to get a tighter bound on the actual monitoring ratio achieved by several measurement points on one path. Second, we are considering multirouting that can arise from load balancing processes in order to get rid of the actual multiplicative impact on the complexity. Third, we are investigating on solutions for measurement campaign, where the operator of a POP or an AS can modify the routing strategy in order to maximize the monitoring ratio, given a set of already installed measurement point. For this last perspective, the flowbased model is expected to apply perfectly. We are also currently testing our solution on larger POPs, with at least 150 routers.
12 8. REFERENCES [1] Yigal Bejerano and Rajeev Rastogi. Robust Monitoring of Link Delays and Faults in IP Networks. In Proceedings of IEEE Infocom, [2] Supratik Bhattacharyya, Christophe Diot, and Jorjeta Jetcheva. POPLevel and AccessLinkLevel Traffic Dynamics in a Tier1 POP. In Proceedings of the 1st ACM SIGCOMM Workshop on Internet Measurement (IMW), San Francisco, November [3] Claude Chaudet, Eric Fleury, and Isabelle Gurin Lassous. Optimal positioning of active and passive monitoring devices. Resdearch Report 5273, INRIA, July [4] Nick Duffield. Sampling for passive internet measurement: a review. Statistical Science, 19(3), [5] Nick Duffield, Carsten Lund, and Mikkel Thorup. Estimating flow distributions from sampled flow statistics. In Proceedings of the ACM SIGCOMM 2003 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, Karlsruhe, Germany, October [6] G. Even, G. Kortsarz, and W. Slany. On network design problems: fixed cost flows and the Covering Steiner Problem. Transactions on Algorithms, To be published. [7] Uriel Feige. A threshold of ln n for approximating set cover. Journal of the ACM, 45(4): , July [8] Ramesh Govindan and Hongsuda Tangmunarunkit. Heuristics for internet map discovery. In Proceedings of IEEE Infocom. IEEE, [9] Joseph D. Horton and Alejandro LopezOrtiz. On the Number of Distributed Measurement Points for Network Tomography. In Proceedings of the 3rd ACM SIGCOMM conference on Internet measurement (IMC), Miami Beach, USA, October [10] Sharad Jaiswal, Gianluca Iannaccone, Christophe Diot, Jim Kurose, and Don Towsley. Inferring TCP Connection Characteristics Through Passive Measurements. In Proceedings of IEEE Infocom, Hong Kong, March [11] Sugih Jamin, Cheng Jin, Yixin Jin, Danny Raz, and Lixia Zhang. On the placement of internet instrumentation. In Proceedings of IEEE Infocom, Tel Aviv, Israel, March [12] Murari Kodialam and T. V. Lakshman. Detecting Network Intrusions via Sampling: A Game Theoretic Approach. In Proceedings of IEEE Infocom, San Francisco, USA, March IEEE. [13] David Moore, Geoffrey M. Voelker, and Stefan Savage. Inferring Internet Denial of Service Activity. In Proceedings of the 10th Security Symposium (USENI Security 01), Washington D.C., USA, August [14] Tatsuya Mori, Masato Uchida, Ryoichi Kawahara, Jianping Pan, and Shigeki Goto. Identifying elephant flows through periodically sampled packets. In Proceedings of the 4th ACM SIGCOMM conference on Internet measurement, Taormina, Italy, October [15] Hung. Nguyen and Patrick Thiran. Active Measurement for Multiple Link Failures Diagnosis in IP Networks. In 5th International Workshop on Passive and Active Network Measurement (PAM 2004), number 3015 in LNCS, pages , Antibes JuanlesPins, France, April Springer. [16] Andrew K. Paxson, Vern Adams and Matt Mathis. Experiences with NIMI. In Passive & Active Measurement Workshop (PAM 2000), Hamilton, New Zealand, April [17] Vern Paxson, Guy Almes, Jamshid Mahdavi, and Mathis Matt. Framework for IP Performance Metrics. RFC 2330, IETF, May [18] Jergen Quittek, Tanja Zseby, Benoit Claise, and Sebastian Zander. Requirements for IP Flow Information Export. RFC 3917, IETF, October [19] Petr Slavik. A tight analysis of the greedy algorithm for set cover. In STOC 96: Proceedings of the twentyeighth annual ACM symposium on Theory of computing, pages , New York, NY, USA, ACM Press. [20] Petr Slavik. Improved performance of the greedy algorithm for partial cover. Inf. Process. Lett., 64(5): , [21] N. Spring, R. Mahajan, and D. Wetherall. Measuring ISP topologies with rocketfuel. In SIGCOMM. ACM, [22] Kyoungwon Suh, Yang Guo, Jim Kurose, and Don Towsley. Locating network monitors: complexity, heuristics, and coverage. In Proceedings of IEEE Infocom, Miami, USA, March 2005.
SecurityAware Beacon Based Network Monitoring
SecurityAware Beacon Based Network Monitoring Masahiro Sasaki, Liang Zhao, Hiroshi Nagamochi Graduate School of Informatics, Kyoto University, Kyoto, Japan Email: {sasaki, liang, nag}@amp.i.kyotou.ac.jp
More informationCMSC 858T: Randomized Algorithms Spring 2003 Handout 8: The Local Lemma
CMSC 858T: Randomized Algorithms Spring 2003 Handout 8: The Local Lemma Please Note: The references at the end are given for extra reading if you are interested in exploring these ideas further. You are
More informationNetwork (Tree) Topology Inference Based on Prüfer Sequence
Network (Tree) Topology Inference Based on Prüfer Sequence C. Vanniarajan and Kamala Krithivasan Department of Computer Science and Engineering Indian Institute of Technology Madras Chennai 600036 vanniarajanc@hcl.in,
More informationPerformance of networks containing both MaxNet and SumNet links
Performance of networks containing both MaxNet and SumNet links Lachlan L. H. Andrew and Bartek P. Wydrowski Abstract Both MaxNet and SumNet are distributed congestion control architectures suitable for
More informationOn the TradeOff between Control Plane Load and Data Plane Efficiency in Software Defined Networks
1 Technion  Computer Science Department  Tehnical Report CS010  01 On the TradeOff between Control Plane Load and Data Plane Efficiency in Software Defined Networks Abstract Software Defined Networking
More informationCHAPTER 2. QoS ROUTING AND ITS ROLE IN QOS PARADIGM
CHAPTER 2 QoS ROUTING AND ITS ROLE IN QOS PARADIGM 22 QoS ROUTING AND ITS ROLE IN QOS PARADIGM 2.1 INTRODUCTION As the main emphasis of the present research work is on achieving QoS in routing, hence this
More information2004 Networks UK Publishers. Reprinted with permission.
Riikka Susitaival and Samuli Aalto. Adaptive load balancing with OSPF. In Proceedings of the Second International Working Conference on Performance Modelling and Evaluation of Heterogeneous Networks (HET
More informationChapter 11. 11.1 Load Balancing. Approximation Algorithms. Load Balancing. Load Balancing on 2 Machines. Load Balancing: Greedy Scheduling
Approximation Algorithms Chapter Approximation Algorithms Q. Suppose I need to solve an NPhard problem. What should I do? A. Theory says you're unlikely to find a polytime algorithm. Must sacrifice one
More information2.3 Scheduling jobs on identical parallel machines
2.3 Scheduling jobs on identical parallel machines There are jobs to be processed, and there are identical machines (running in parallel) to which each job may be assigned Each job = 1,,, must be processed
More informationStability of QOS. Avinash Varadarajan, Subhransu Maji {avinash,smaji}@cs.berkeley.edu
Stability of QOS Avinash Varadarajan, Subhransu Maji {avinash,smaji}@cs.berkeley.edu Abstract Given a choice between two services, rest of the things being equal, it is natural to prefer the one with more
More informationDetecting Anomalies Using EndtoEnd Path Measurements
Detecting Anomalies Using EndtoEnd Path Measurements K. V. M. Naidu Debmalya Panigrahi Rajeev Rastogi Bell Labs Research India, Bangalore MIT Bell Labs Research India, Bangalore Abstract In this paper,
More informationA New Forwarding Policy for Load Balancing in Communication Networks
A New Forwarding Policy for Load Balancing in Communication Networks Martin Heusse Yvon Kermarrec ENST de Bretagne BP 83, 985 Brest Cedex, France Martin.Heusse@enstbretagne.fr Abstract We present in this
More informationSingleLink Failure Detection in AllOptical Networks Using Monitoring Cycles and Paths
SingleLink Failure Detection in AllOptical Networks Using Monitoring Cycles and Paths Satyajeet S. Ahuja, Srinivasan Ramasubramanian, and Marwan Krunz Department of ECE, University of Arizona, Tucson,
More informationFairness in Routing and Load Balancing
Fairness in Routing and Load Balancing Jon Kleinberg Yuval Rabani Éva Tardos Abstract We consider the issue of network routing subject to explicit fairness conditions. The optimization of fairness criteria
More informationMultilayer MPLS Network Design: the Impact of Statistical Multiplexing
Multilayer MPLS Network Design: the Impact of Statistical Multiplexing Pietro Belotti, Antonio Capone, Giuliana Carello, Federico Malucelli Tepper School of Business, Carnegie Mellon University, Pittsburgh
More information! Solve problem to optimality. ! Solve problem in polytime. ! Solve arbitrary instances of the problem. !approximation algorithm.
Approximation Algorithms Chapter Approximation Algorithms Q Suppose I need to solve an NPhard problem What should I do? A Theory says you're unlikely to find a polytime algorithm Must sacrifice one of
More informationAPPENDIX 1 USER LEVEL IMPLEMENTATION OF PPATPAN IN LINUX SYSTEM
152 APPENDIX 1 USER LEVEL IMPLEMENTATION OF PPATPAN IN LINUX SYSTEM A1.1 INTRODUCTION PPATPAN is implemented in a test bed with five Linux system arranged in a multihop topology. The system is implemented
More informationPART III. OPSbased wide area networks
PART III OPSbased wide area networks Chapter 7 Introduction to the OPSbased wide area network 7.1 Stateoftheart In this thesis, we consider the general switch architecture with full connectivity
More informationTHE PROBLEM WORMS (1) WORMS (2) THE PROBLEM OF WORM PROPAGATION/PREVENTION THE MINIMUM VERTEX COVER PROBLEM
1 THE PROBLEM OF WORM PROPAGATION/PREVENTION I.E. THE MINIMUM VERTEX COVER PROBLEM Prof. Tiziana Calamoneri Network Algorithms A.y. 2014/15 2 THE PROBLEM WORMS (1)! A computer worm is a standalone malware
More informationLoad Balancing Mechanisms in Data Center Networks
Load Balancing Mechanisms in Data Center Networks Santosh Mahapatra Xin Yuan Department of Computer Science, Florida State University, Tallahassee, FL 33 {mahapatr,xyuan}@cs.fsu.edu Abstract We consider
More informationA Scalable Monitoring Approach Based on Aggregation and Refinement
IEEE JOURNAL ON SELECTED AREAS IN COMMUNICATIONS, VOL 20, NO 4, MAY 2002 677 A Scalable Monitoring Approach Based on Aggregation and Refinement YowJian Lin, Member, IEEE and Mun Choon Chan, Member, IEEE
More informationAlgorithm Design and Analysis
Algorithm Design and Analysis LECTURE 27 Approximation Algorithms Load Balancing Weighted Vertex Cover Reminder: Fill out SRTEs online Don t forget to click submit Sofya Raskhodnikova 12/6/2011 S. Raskhodnikova;
More informationOn the effect of forwarding table size on SDN network utilization
IBM Haifa Research Lab On the effect of forwarding table size on SDN network utilization Rami Cohen IBM Haifa Research Lab Liane Lewin Eytan Yahoo Research, Haifa Seffi Naor CS Technion, Israel Danny Raz
More informationIP Network Monitoring and Measurements: Techniques and Experiences
IP Network Monitoring and Measurements: Techniques and Experiences Philippe Owezarski LAASCNRS Toulouse, France Owe@laas.fr 1 Outline 4 Introduction 4 Monitoring problematic 8Only based on network administration
More information! Solve problem to optimality. ! Solve problem in polytime. ! Solve arbitrary instances of the problem. #approximation algorithm.
Approximation Algorithms 11 Approximation Algorithms Q Suppose I need to solve an NPhard problem What should I do? A Theory says you're unlikely to find a polytime algorithm Must sacrifice one of three
More informationAdaptive Tolerance Algorithm for Distributed TopK Monitoring with Bandwidth Constraints
Adaptive Tolerance Algorithm for Distributed TopK Monitoring with Bandwidth Constraints Michael Bauer, Srinivasan Ravichandran University of WisconsinMadison Department of Computer Sciences {bauer, srini}@cs.wisc.edu
More informationprinceton univ. F 13 cos 521: Advanced Algorithm Design Lecture 6: Provable Approximation via Linear Programming Lecturer: Sanjeev Arora
princeton univ. F 13 cos 521: Advanced Algorithm Design Lecture 6: Provable Approximation via Linear Programming Lecturer: Sanjeev Arora Scribe: One of the running themes in this course is the notion of
More informationApproximation Algorithms
Approximation Algorithms or: How I Learned to Stop Worrying and Deal with NPCompleteness Ong Jit Sheng, Jonathan (A0073924B) March, 2012 Overview Key Results (I) General techniques: Greedy algorithms
More informationChapter 4. VoIP Metric based Traffic Engineering to Support the Service Quality over the Internet (Interdomain IP network)
Chapter 4 VoIP Metric based Traffic Engineering to Support the Service Quality over the Internet (Interdomain IP network) 4.1 Introduction Traffic Engineering can be defined as a task of mapping traffic
More informationHow Router Technology Shapes InterCloud Computing Service Architecture for The Future Internet
How Router Technology Shapes InterCloud Computing Service Architecture for The Future Internet Professor JiannLiang Chen Friday, September 23, 2011 Wireless Networks and Evolutional Communications Laboratory
More informationIntegrating Benders decomposition within Constraint Programming
Integrating Benders decomposition within Constraint Programming Hadrien Cambazard, Narendra Jussien email: {hcambaza,jussien}@emn.fr École des Mines de Nantes, LINA CNRS FRE 2729 4 rue Alfred Kastler BP
More informationPath Selection Methods for Localized Quality of Service Routing
Path Selection Methods for Localized Quality of Service Routing Xin Yuan and Arif Saifee Department of Computer Science, Florida State University, Tallahassee, FL Abstract Localized Quality of Service
More informationTOPOLOGIES NETWORK SECURITY SERVICES
TOPOLOGIES NETWORK SECURITY SERVICES 1 R.DEEPA 1 Assitant Professor, Dept.of.Computer science, Raja s college of Tamil Studies & Sanskrit,Thiruvaiyaru ABSTRACTIn the paper propose about topology security
More informationBinary vs Analogue Path Monitoring in IP Networks
Binary vs Analogue Path Monitoring in IP Networks Hung X. Nguyen and Patrick Thiran School of Computer and Communication Sciences, EPFL CH1015 Lausanne, Switzerland {hung.nguyen, patrick.thiran}@epfl.ch
More informationAn Efficient Client Server Assignment for Internet Distributed Systems
1 An Efficient Client Server Assignment for Internet Distributed Systems Swathi Balakrishna, Dr. Ling Ding Computer Science and Systems, University of Washington, Tacoma Abstract Internet is a network
More informationTCP over Multihop Wireless Networks * Overview of Transmission Control Protocol / Internet Protocol (TCP/IP) Internet Protocol (IP)
TCP over Multihop Wireless Networks * Overview of Transmission Control Protocol / Internet Protocol (TCP/IP) *Slides adapted from a talk given by Nitin Vaidya. Wireless Computing and Network Systems Page
More informationProbe Station Placement for Robust Monitoring of Networks
Probe Station Placement for Robust Monitoring of Networks Maitreya Natu Dept. of Computer and Information Science University of Delaware Newark, DE, USA, 97 Email: natu@cis.udel.edu Adarshpal S. Sethi
More informationA Catechistic Method for Traffic Pattern Discovery in MANET
A Catechistic Method for Traffic Pattern Discovery in MANET R. Saranya 1, R. Santhosh 2 1 PG Scholar, Computer Science and Engineering, Karpagam University, Coimbatore. 2 Assistant Professor, Computer
More informationAN OVERVIEW OF QUALITY OF SERVICE COMPUTER NETWORK
Abstract AN OVERVIEW OF QUALITY OF SERVICE COMPUTER NETWORK Mrs. Amandeep Kaur, Assistant Professor, Department of Computer Application, Apeejay Institute of Management, Ramamandi, Jalandhar144001, Punjab,
More informationLoad Balancing. Load Balancing 1 / 24
Load Balancing Backtracking, branch & bound and alphabeta pruning: how to assign work to idle processes without much communication? Additionally for alphabeta pruning: implementing the youngbrotherswait
More informationNetwork management and QoS provisioning  QoS in the Internet
QoS in the Internet Inernet approach is based on datagram service (best effort), so provide QoS was not a purpose for developers. Mainly problems are:. recognizing flows;. manage the issue that packets
More informationQuality of Service using Traffic Engineering over MPLS: An Analysis. Praveen Bhaniramka, Wei Sun, Raj Jain
Praveen Bhaniramka, Wei Sun, Raj Jain Department of Computer and Information Science The Ohio State University 201 Neil Ave, DL39 Columbus, OH 43210 USA Telephone Number: +1 6142923989 FAX number: +1
More informationQUALITY OF SERVICE METRICS FOR DATA TRANSMISSION IN MESH TOPOLOGIES
QUALITY OF SERVICE METRICS FOR DATA TRANSMISSION IN MESH TOPOLOGIES SWATHI NANDURI * ZAHOORULHUQ * Master of Technology, Associate Professor, G. Pulla Reddy Engineering College, G. Pulla Reddy Engineering
More informationTraffic Engineering for Multiple Spanning Tree Protocol in Large Data Centers
Traffic Engineering for Multiple Spanning Tree Protocol in Large Data Centers Ho Trong Viet, Yves Deville, Olivier Bonaventure, Pierre François ICTEAM, Université catholique de Louvain (UCL), Belgium.
More informationExtending the Internet of Things to IPv6 with Software Defined Networking
Extending the Internet of Things to IPv6 with Software Defined Networking Abstract [WHITE PAPER] Pedro MartinezJulia, Antonio F. Skarmeta {pedromj,skarmeta}@um.es The flexibility and general programmability
More informationApplication of Adaptive Probing for Fault Diagnosis in Computer Networks 1
Application of Adaptive Probing for Fault Diagnosis in Computer Networks 1 Maitreya Natu Dept. of Computer and Information Sciences University of Delaware, Newark, DE, USA, 19716 Email: natu@cis.udel.edu
More information5.1 Bipartite Matching
CS787: Advanced Algorithms Lecture 5: Applications of Network Flow In the last lecture, we looked at the problem of finding the maximum flow in a graph, and how it can be efficiently solved using the FordFulkerson
More informationApproximation Algorithms: LP Relaxation, Rounding, and Randomized Rounding Techniques. My T. Thai
Approximation Algorithms: LP Relaxation, Rounding, and Randomized Rounding Techniques My T. Thai 1 Overview An overview of LP relaxation and rounding method is as follows: 1. Formulate an optimization
More informationTHE last two decades have witnessed an exponential
IEEE JSAC  SAMPLING 2006 1 Practical Beacon Placement for Link Monitoring Using Network Tomography Ritesh Kumar and Jasleen Kaur Abstract Recent interest in using tomography for network monitoring has
More informationJoint Optimization of Monitor Location and Network Anomaly Detection
Joint Optimization of Monitor Location and Network Anomaly Detection Emna Salhi, Samer Lahoud, Bernard Cousin ATNET Research Team, IRISA University of Rennes I, France {emna.salhi, samer.lahoud, bernard.cousin}@irisa.fr
More informationIntroduction to LAN/WAN. Network Layer
Introduction to LAN/WAN Network Layer Topics Introduction (55.1) Routing (5.2) (The core) Internetworking (5.5) Congestion Control (5.3) Network Layer Design Isues StoreandForward Packet Switching Services
More informationJUSTINTIME SCHEDULING WITH PERIODIC TIME SLOTS. Received December May 12, 2003; revised February 5, 2004
Scientiae Mathematicae Japonicae Online, Vol. 10, (2004), 431 437 431 JUSTINTIME SCHEDULING WITH PERIODIC TIME SLOTS Ondřej Čepeka and Shao Chin Sung b Received December May 12, 2003; revised February
More informationRouting in Switched Networks
Routing in Switched Networks Chapter 12 CS420/520 Axel Krings Page 1 Routing in Circuit Switched Network Many connections will need paths through more than one switch Need to find a route Efficiency Resilience
More informationBeyond the Stars: Revisiting Virtual Cluster Embeddings
Beyond the Stars: Revisiting Virtual Cluster Embeddings Matthias Rost Technische Universität Berlin September 7th, 2015, TélécomParisTech Joint work with Carlo Fuerst, Stefan Schmid Published in ACM SIGCOMM
More information1. Comments on reviews a. Need to avoid just summarizing web page asks you for:
1. Comments on reviews a. Need to avoid just summarizing web page asks you for: i. A one or two sentence summary of the paper ii. A description of the problem they were trying to solve iii. A summary of
More informationTraffic Behavior Analysis with Poisson Sampling on Highspeed Network 1
Traffic Behavior Analysis with Poisson Sampling on Highspeed etwork Guang Cheng Jian Gong (Computer Department of Southeast University anjing 0096, P.R.China) Abstract: With the subsequent increasing
More informationApplied Algorithm Design Lecture 5
Applied Algorithm Design Lecture 5 Pietro Michiardi Eurecom Pietro Michiardi (Eurecom) Applied Algorithm Design Lecture 5 1 / 86 Approximation Algorithms Pietro Michiardi (Eurecom) Applied Algorithm Design
More informationEvaluation of a New Method for Measuring the Internet Degree Distribution: Simulation Results
Evaluation of a New Method for Measuring the Internet Distribution: Simulation Results Christophe Crespelle and Fabien Tarissan LIP6 CNRS and Université Pierre et Marie Curie Paris 6 4 avenue du président
More informationNetwork Performance Monitoring at Small Time Scales
Network Performance Monitoring at Small Time Scales Konstantina Papagiannaki, Rene Cruz, Christophe Diot Sprint ATL Burlingame, CA dina@sprintlabs.com Electrical and Computer Engineering Department University
More informationThe Trip Scheduling Problem
The Trip Scheduling Problem Claudia Archetti Department of Quantitative Methods, University of Brescia Contrada Santa Chiara 50, 25122 Brescia, Italy Martin Savelsbergh School of Industrial and Systems
More informationA Review of Anomaly Detection Techniques in Network Intrusion Detection System
A Review of Anomaly Detection Techniques in Network Intrusion Detection System Dr.D.V.S.S.Subrahmanyam Professor, Dept. of CSE, Sreyas Institute of Engineering & Technology, Hyderabad, India ABSTRACT:In
More informationMaximizing Restorable Throughput in MPLS Networks Reuven Cohen, Senior Member, IEEE, and Gabi Nakibly, Member, IEEE
568 IEEE/ACM TRANSACTIONS ON NETWORKING, VOL. 18, NO. 2, APRIL 2010 Maximizing Restorable Throughput in MPLS Networks Reuven Cohen, Senior Member, IEEE, and Gabi Nakibly, Member, IEEE Abstract MPLS recovery
More informationOn the Interaction and Competition among Internet Service Providers
On the Interaction and Competition among Internet Service Providers Sam C.M. Lee John C.S. Lui + Abstract The current Internet architecture comprises of different privately owned Internet service providers
More informationCompetitive Analysis of On line Randomized Call Control in Cellular Networks
Competitive Analysis of On line Randomized Call Control in Cellular Networks Ioannis Caragiannis Christos Kaklamanis Evi Papaioannou Abstract In this paper we address an important communication issue arising
More informationA Game Theoretical Framework on Intrusion Detection in Heterogeneous Networks Lin Chen, Member, IEEE, and Jean Leneutre
IEEE TRANSACTIONS ON INFORMATION FORENSICS AND SECURITY, VOL 4, NO 2, JUNE 2009 165 A Game Theoretical Framework on Intrusion Detection in Heterogeneous Networks Lin Chen, Member, IEEE, and Jean Leneutre
More informationRouting Basics. Chapter Goals. What Is Routing? CHAPTER
CHAPTER 5 Chapter Goals Learn the basics of routing protocols Learn the differences between linkstate and distance vector routing protocols Learn about the metrics used by routing protocols to determine
More informationA hierarchical multicriteria routing model with traffic splitting for MPLS networks
A hierarchical multicriteria routing model with traffic splitting for MPLS networks João Clímaco, José Craveirinha, Marta Pascoal jclimaco@inesccpt, jcrav@deecucpt, marta@matucpt University of Coimbra
More informationMinimizing Probing Cost and Achieving Identifiability in Probe Based Network Link Monitoring
Minimizing Probing Cost and Achieving Identifiability in Probe Based Network Link Monitoring Qiang Zheng, Student Member, IEEE, and Guohong Cao, Fellow, IEEE Department of Computer Science and Engineering
More informationPath Selection Analysis in MPLS Network Based on QoS
Cumhuriyet Üniversitesi Fen Fakültesi Fen Bilimleri Dergisi (CFD), Cilt:36, No: 6 Özel Sayı (2015) ISSN: 13001949 Cumhuriyet University Faculty of Science Science Journal (CSJ), Vol. 36, No: 6 Special
More informationStudent, Haryana Engineering College, Haryana, India 2 H.O.D (CSE), Haryana Engineering College, Haryana, India
Volume 5, Issue 6, June 2015 ISSN: 2277 128X International Journal of Advanced Research in Computer Science and Software Engineering Research Paper Available online at: www.ijarcsse.com A New Protocol
More informationLowrate TCPtargeted Denial of Service Attack Defense
Lowrate TCPtargeted Denial of Service Attack Defense Johnny Tsao Petros Efstathopoulos University of California, Los Angeles, Computer Science Department Los Angeles, CA Email: {johnny5t, pefstath}@cs.ucla.edu
More informationApproximated Distributed Minimum Vertex Cover Algorithms for Bounded Degree Graphs
Approximated Distributed Minimum Vertex Cover Algorithms for Bounded Degree Graphs Yong Zhang 1.2, Francis Y.L. Chin 2, and HingFung Ting 2 1 College of Mathematics and Computer Science, Hebei University,
More informationWeek 5 Integral Polyhedra
Week 5 Integral Polyhedra We have seen some examples 1 of linear programming formulation that are integral, meaning that every basic feasible solution is an integral vector. This week we develop a theory
More information(Refer Slide Time: 02:17)
Internet Technology Prof. Indranil Sengupta Department of Computer Science and Engineering Indian Institute of Technology, Kharagpur Lecture No #06 IP Subnetting and Addressing (Not audible: (00:46)) Now,
More informationOffline sorting buffers on Line
Offline sorting buffers on Line Rohit Khandekar 1 and Vinayaka Pandit 2 1 University of Waterloo, ON, Canada. email: rkhandekar@gmail.com 2 IBM India Research Lab, New Delhi. email: pvinayak@in.ibm.com
More informationEstablishing How Many VoIP Calls a Wireless LAN Can Support Without Performance Degradation
Establishing How Many VoIP Calls a Wireless LAN Can Support Without Performance Degradation ABSTRACT Ángel Cuevas Rumín Universidad Carlos III de Madrid Department of Telematic Engineering Ph.D Student
More informationA Passive Method for Estimating EndtoEnd TCP Packet Loss
A Passive Method for Estimating EndtoEnd TCP Packet Loss Peter Benko and Andras Veres Traffic Analysis and Network Performance Laboratory, Ericsson Research, Budapest, Hungary {Peter.Benko, Andras.Veres}@eth.ericsson.se
More informationD1.1 Service Discovery system: Load balancing mechanisms
D1.1 Service Discovery system: Load balancing mechanisms VERSION 1.0 DATE 2011 EDITORIAL MANAGER Eddy Caron AUTHORS STAFF Eddy Caron, Cédric Tedeschi Copyright ANR SPADES. 08ANRSEGI025. Contents Introduction
More informationSecurity Considerations for Intrinsic Monitoring within IPv6 Networks: Work in Progress
Security Considerations for Intrinsic Monitoring within IPv6 Networks: Work in Progress Alan Davy and Lei Shi Telecommunication Software&Systems Group, Waterford Institute of Technology, Ireland adavy,lshi@tssg.org
More informationAdaptive Sampling for Network Performance Measurement Under Voice Traffic
Sampling for Network Performance Measurement Under Voice Traffic Wenhong Ma and Changcheng Huang Optical Networks Laboratory Department of Systems and Computer Engineering, Carleton University 1125 Colonel
More informationNetworking Topology For Your System
This chapter describes the different networking topologies supported for this product, including the advantages and disadvantages of each. Select the one that best meets your needs and your network deployment.
More informationQuality of Service versus Fairness. Inelastic Applications. QoS Analogy: Surface Mail. How to Provide QoS?
18345: Introduction to Telecommunication Networks Lectures 20: Quality of Service Peter Steenkiste Spring 2015 www.cs.cmu.edu/~prs/netsece Overview What is QoS? Queuing discipline and scheduling Traffic
More informationDistributed Denial of Service (DDoS)
Distributed Denial of Service (DDoS) Defending against FloodingBased DDoS Attacks: A Tutorial Rocky K. C. Chang Presented by Adwait Belsare (adwait@wpi.edu) Suvesh Pratapa (suveshp@wpi.edu) Modified by
More informationA Simulation Study of Effect of MPLS on Latency over a Wide Area Network (WAN)
A Simulation Study of Effect of MPLS on Latency over a Wide Area Network (WAN) Adeyinka A. Adewale, Samuel N. John, and Charles Ndujiuba 1 Department of Electrical and Information Engineering, Covenant
More informationThesis work and research project
Thesis work and research project Hélia Pouyllau, INRIA of Rennes, Campus Beaulieu 35042 Rennes, helia.pouyllau@irisa.fr July 16, 2007 1 Thesis work on Distributed algorithms for endtoend QoS contract
More informationFault Localization Using Passive EndtoEnd Measurement and Sequential Testing for Wireless Sensor Networks
Fault Localization Using Passive EndtoEnd Measurement and Sequential Testing for Wireless Sensor Networks Bing Wang, Wei Wei, Wei Zeng Computer Science & Engineering Dept. University of Connecticut,
More informationRestorable Logical Topology using CrossLayer Optimization
פרויקטים בתקשורת מחשבים  236340  סמסטר אביב 2016 Restorable Logical Topology using CrossLayer Optimization Abstract: Today s communication networks consist of routers and optical switches in a logical
More informationCROSS LAYER BASED MULTIPATH ROUTING FOR LOAD BALANCING
CHAPTER 6 CROSS LAYER BASED MULTIPATH ROUTING FOR LOAD BALANCING 6.1 INTRODUCTION The technical challenges in WMNs are load balancing, optimal routing, fairness, network autoconfiguration and mobility
More informationDesign and Experiments of small DDoS Defense System using Traffic Deflecting in Autonomous System
Design and Experiments of small DDoS Defense System using Traffic Deflecting in Autonomous System HoSeok Kang and SungRyul Kim Konkuk University Seoul, Republic of Korea hsriver@gmail.com and kimsr@konkuk.ac.kr
More informationMaximizing Restorable Throughput in MPLS Networks
Maximizing Restorable Throughput in MPLS Networks Reuven Cohen Gabi Nakibly Technion Israel Institute of Technology, Computer Science, Haifa, Israel Abstract MPLS recovery mechanisms are increasing in
More informationChange Management in Enterprise IT Systems: Process Modeling and Capacityoptimal Scheduling
Change Management in Enterprise IT Systems: Process Modeling and Capacityoptimal Scheduling Praveen K. Muthusamy, Koushik Kar, Sambit Sahu, Prashant Pradhan and Saswati Sarkar Rensselaer Polytechnic Institute
More informationScaling 10Gb/s Clustering at WireSpeed
Scaling 10Gb/s Clustering at WireSpeed InfiniBand offers costeffective wirespeed scaling with deterministic performance Mellanox Technologies Inc. 2900 Stender Way, Santa Clara, CA 95054 Tel: 4089703400
More informationQoSIP: A QoS Aware IP Routing Protocol for Multimedia Data
QoSIP: A QoS Aware IP Routing Protocol for Multimedia Data Md. Golam Shagadul Amin Talukder and AlMukaddim Khan Pathan* Department of Computer Science and Engineering, Metropolitan University, Sylhet,
More informationPolicy Distribution Methods for Function Parallel Firewalls
Policy Distribution Methods for Function Parallel Firewalls Michael R. Horvath GreatWall Systems WinstonSalem, NC 27101, USA Errin W. Fulp Department of Computer Science Wake Forest University WinstonSalem,
More informationDynamic Source Routing in Ad Hoc Wireless Networks
Dynamic Source Routing in Ad Hoc Wireless Networks David B. Johnson David A. Maltz Computer Science Department Carnegie Mellon University 5000 Forbes Avenue Pittsburgh, PA 152133891 dbj@cs.cmu.edu Abstract
More informationIN THIS PAPER, we study the delay and capacity tradeoffs
IEEE/ACM TRANSACTIONS ON NETWORKING, VOL. 15, NO. 5, OCTOBER 2007 981 Delay and Capacity TradeOffs in Mobile Ad Hoc Networks: A Global Perspective Gaurav Sharma, Ravi Mazumdar, Fellow, IEEE, and Ness
More informationAKAMAI WHITE PAPER. Delivering Dynamic Web Content in Cloud Computing Applications: HTTP resource download performance modelling
AKAMAI WHITE PAPER Delivering Dynamic Web Content in Cloud Computing Applications: HTTP resource download performance modelling Delivering Dynamic Web Content in Cloud Computing Applications 1 Overview
More information5 INTEGER LINEAR PROGRAMMING (ILP) E. Amaldi Fondamenti di R.O. Politecnico di Milano 1
5 INTEGER LINEAR PROGRAMMING (ILP) E. Amaldi Fondamenti di R.O. Politecnico di Milano 1 General Integer Linear Program: (ILP) min c T x Ax b x 0 integer Assumption: A, b integer The integrality condition
More informationDefinition. A Historical Example
Overlay Networks This lecture contains slides created by Ion Stoica (UC Berkeley). Slides used with permission from author. All rights remain with author. Definition Network defines addressing, routing,
More informationMethods for Firewall Policy Detection and Prevention
Methods for Firewall Policy Detection and Prevention Hemkumar D Asst Professor Dept. of Computer science and Engineering Sharda University, Greater Noida NCR Mohit Chugh B.tech (Information Technology)
More information